CVE-2022-32224

Published: 05/12/2022 Updated: 08/12/2022

CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9

VMScore: 0

A possible escalation to RCE vulnerability exists when using YAML serialized columns in Active Record < 7.0.3.1, <6.1.6.1, <6.0.5.1 and <5.2.8.1 which could allow an attacker, that can manipulate data in the database (via means like SQL injection), the ability to escalate to an RCE.

Vulnerable Product	Search on Vulmon	Subscribe to Product
activerecord project activerecord

Debian Bug report logs - #1016140 rails: CVE-2022-32224 Package: src:rails; Maintainer for src:rails is Debian Ruby Team <pkg-ruby-extras-maintainers@listsaliothdebianorg>; Reported by: Moritz Mühlenhoff <jmm@inutilorg> Date: Wed, 27 Jul 2022 20:57:06 UTC Severity: grave Tags: security Reply or subscribe t ...

Synopsis Important: Satellite 613 Release Type/Severity Security Advisory: Important Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic An update is now available for Red Hat Satellite 613 The release contains anew version of Satellite and important security fixes ...

Synopsis Critical: Satellite 6115 Async Security Update Type/Severity Security Advisory: Critical Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic Updated Satellite 611 packages that fixes critical security bugs and severalregular bugs are now available for Red ...

Synopsis Critical: Satellite 6121 Async Security Update Type/Severity Security Advisory: Critical Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic Updated Satellite 612 packages that fixes critical security bugs and several regular bugs are now available for Red ...

CVE-2022-3222 ActiveRecord シリアライズ動作確認 discussrubyonrailsorg/t/cve-2022-32224-possible-rce-escalation-bug-with-serialized-columns-in-active-record/81017 apirubyonrailsorg/classes/ActiveRecord/AttributeMethods/Serialization/ClassMethodshtml rails/rails#45584 準備 bundle install bin/rails db:migrate

Demo of rails serializtion problem Running the demo Works: BUNDLE_GEMFILE=Gemfile-526 bundle exec ruby ar_playrb -- create_table("comments", {:force=>:cascade}) -> 00049s -- create_table("posts", {:force=>:cascade}) -> 00004s 100 {:background=>"black", :display=>"large"}

CWE-502 https://groups.google.com/g/rubyonrails-security/c/MmFO3LYQE8U https://github.com/advisories/GHSA-3hhc-qp5v-9p2j https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1016140 https://nvd.nist.gov

CVE-2022-32224

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Github Repositories

References

Vulmon Search

About

Products

Connect